|
451
|
4.3 |
MEDIUM
Network
|
-
|
-
|
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #141, ClipBucket v5 contains an improper neutralization of SQL wildcard characters in the subtitle editing endpoint. A…
New
|
CWE-155 CWE-943
|
CVE-2026-49482
|
2026-06-13 00:56 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
452
|
- |
|
-
|
-
|
Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the member’s effective per…
New
|
CWE-863
Incorrect Authorization
|
CVE-2026-47195
|
2026-06-13 00:56 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
453
|
- |
|
-
|
-
|
Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the latest release suppresses mentions when creating, unbanning, unwarning, kicking, muting, and unmuting, but stored warning reasons a…
New
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2026-48485
|
2026-06-13 00:56 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
454
|
- |
|
-
|
-
|
Quest Bot is an opensource Discord Bot. Prior to version 1.1.8, any user who can access the ticket panel can repeatedly create new ticket channels. The latest release still creates a new database tic…
New
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2026-49347
|
2026-06-13 00:56 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
455
|
- |
|
-
|
-
|
Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, there is a possible SQL Injection via get_blog_list. This issue has been patched in versions 15.106.0 and 16.…
New
|
CWE-89
SQL Injection
|
CVE-2026-41581
|
2026-06-13 00:56 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
456
|
- |
|
-
|
-
|
Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious scripts in the browse…
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-44205
|
2026-06-13 00:56 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
457
|
- |
|
-
|
-
|
Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, stored XSS in Note was possible due to lack of sanitization. This issue has been patched in versions 15.106.0…
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-47739
|
2026-06-13 00:56 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
458
|
8.1 |
HIGH
Network
|
-
|
-
|
Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can bypass IPv6 subnet rules d…
New
|
CWE-284 CWE-697
Improper Access Control Incorrect Comparison
|
CVE-2026-44249
|
2026-06-13 00:55 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
459
|
7.5 |
HIGH
Network
|
-
|
-
|
Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending a…
New
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-44250
|
2026-06-13 00:55 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
460
|
7.5 |
HIGH
Network
|
-
|
-
|
Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending c…
New
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-44890
|
2026-06-13 00:55 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|